Astra
An AI security-awareness assistant — generating awareness content, phishing simulations, and cyber event summaries, with a prompt builder for crafting workflows.
What it is
ASTRA — Awareness, Security & Threat Response Assistant. Security teams spend real hours writing awareness content, building phishing simulations, and summarising cyber events for different audiences. Astra turns those into generated, editable drafts so the human effort goes into judgement, not first drafts.
What it does
- Awareness content — campaign copy, posters, and comms tailored to audience and tone.
- Phishing simulations — realistic simulation content for training programmes.
- Event summaries — plain-language write-ups of cyber events for boards, staff, or technical teams.
- Prompt Builder — a standalone workspace for crafting and previewing AI workflows in real time, so power users can build their own repeatable prompts rather than depending on canned ones.
Why it matters to me
Astra sits exactly where my interests cross: AI systems applied to security problems, wrapped in a product that non-technical people can actually use. The hard part was never the generation — it was designing the guardrails and workflows so output lands ready-to-edit rather than ready-to-regret.
Under the hood
Next.js 14 (App Router) on Vercel, with PostgreSQL via Prisma and Google's Gemini API for generation. The platform has grown into four suites — Operations Cloud, Surface Intelligence, Trust & Compliance, and CyberAware Studio — sharing one identity/RBAC layer and a tenant-aware guardrail system, so scans, policy drafting, and awareness training all inherit the same consent, audit-trail, and human-in-the-loop rules rather than each reinventing them.